February’s MiSec meeting will be held on Thursday, February 9th, at 7pm. Steven F. Fox (@securelexicon) will be presenting “How to Create Social Illusions: A Social Engineering Case Study.”
Steven F. Fox, CISSP, QSA is a Security Architecture and Engineering Advisor at the U.S. Department of the Treasury and holds an MS in Business Information Technology from Walsh College, an NSA recognized Center of Excellence. Mr. Fox brings a cross-disciplinary perspective to the practice of information security; combining his experience as a security consultant, a Sr. IT Auditor and a systems engineer with principles from behavioral/organizational psychology to address security challenges. He is a syndicated blogger covering IT Governance, Risk Management, and IT-Business fusion topics. He also serves on the Board of the Motor City ISSA chapter and hosts/produces the Securelexicon Information Security Podcast.
This presentation will describe a psychological framework that informs a social engineer’s reconnaissance, pretext formulation, and social exploit activities. A case study will illustrate the use of the Social Engineer’s Toolkit, Maltego, and Google Hacking to collect information that contributed to a successful engagement. Attendees will learn how to analyze information for psychological and social indicators that enables a social engineer to model a target’s culture. They will also learn how social engineers use this model to identify opportunities for social exploits.
For details and location, please either contact us through email (info@michsec.org) or log into our IRC channel (Freenode/#MiSec). This month’s meeting will also be streamed via Gotomeeting, Meeting ID: 465-096-790, Meeting Password: misec.
A sneak peak at what is to come:
